Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.mft
File:                     qkHqzdOJUCmcnoEKOen_VCnL4lo.mft (raw, json)
Hash identifier:          Z3Fy3tP3qJ5/7sts9mf5NTNgJzwxgxN6Aib0H2f4fQk=
Subject key identifier:   9F:A9:20:FC:19:DD:EA:8A:EC:86:01:52:35:03:BE:A9:05:89:81:BE
Authority key identifier: AA:41:EA:CD:D3:89:50:29:9C:9E:81:0A:39:E9:FF:54:29:CB:E2:5A
Certificate issuer:       /CN=aa41eacdd38950299c9e810a39e9ff5429cbe25a
Certificate serial:       01A0092937D99D8CD2B1406CBCC40FD71D96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qkHqzdOJUCmcnoEKOen_VCnL4lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.mft
Manifest number:          7E
Signing time:             Sun 16 Aug 2026 06:01:31 +0000
Manifest this update:     Sun 16 Aug 2026 06:01:31 +0000
Manifest next update:     Mon 17 Aug 2026 06:01:31 +0000
Files and hashes:         1: aMJy9IeANZbYVL8CAtiHgm0xoqQ.roa (hash: E4M6mEfejQMjX8Zwy4Poh/25Qtop8e+0EXBl1KbNADM=)
                          2: qkHqzdOJUCmcnoEKOen_VCnL4lo.crl (hash: IuPAdQr8c4jqHMnf1eCHOfH2GrWhJaDqnVh2bFO+rLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qkHqzdOJUCmcnoEKOen_VCnL4lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Aug 2026 06:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:09:29:37:d9:9d:8c:d2:b1:40:6c:bc:c4:0f:d7:1d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa41eacdd38950299c9e810a39e9ff5429cbe25a
        Validity
            Not Before: Aug 16 06:01:31 2026 GMT
            Not After : Aug 17 06:01:31 2026 GMT
        Subject: CN=9fa920fc19ddea8aec8601523503bea9058981be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:19:50:ef:12:31:d9:6e:8b:ad:fc:72:17:96:
                    35:dd:3d:4d:24:1a:01:48:90:2d:a5:b0:b0:ca:d2:
                    0d:a8:20:51:22:6d:c5:42:86:91:82:d8:4d:24:d5:
                    5c:5a:99:9a:d0:31:93:f6:94:ff:8e:fa:ea:27:50:
                    15:9d:53:f0:27:50:fc:5c:ca:9c:6f:e5:98:92:c5:
                    aa:74:17:2a:2b:f3:91:0b:f8:cb:47:83:2a:85:c7:
                    0e:c9:66:64:ac:84:f0:1c:7b:91:e7:8b:2b:a2:38:
                    63:30:59:56:58:98:1f:98:b6:80:7d:47:f0:c5:43:
                    ec:6c:71:5c:cb:7b:67:db:d9:7d:1e:c7:34:63:f4:
                    4e:bc:e8:15:5e:46:97:50:b2:dc:7b:f6:e8:88:c4:
                    ce:8b:b9:8c:d6:85:fa:3a:88:cb:c4:57:7f:86:c0:
                    89:db:6f:9d:51:d3:d6:f5:b4:bf:a4:d3:9d:0f:80:
                    d9:c3:49:87:32:ef:ab:52:fc:0c:75:78:87:bc:76:
                    81:50:bc:5a:0e:07:5e:ac:99:d4:ad:70:b3:92:9a:
                    f5:a3:4b:42:00:c3:86:05:05:72:00:bd:74:2b:41:
                    4b:a3:51:13:c6:37:6e:f9:08:e1:77:e1:5d:c6:81:
                    ec:11:46:c2:cb:9a:6b:1f:52:2f:a9:30:6a:92:dd:
                    f1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A9:20:FC:19:DD:EA:8A:EC:86:01:52:35:03:BE:A9:05:89:81:BE
            X509v3 Authority Key Identifier:
                keyid:AA:41:EA:CD:D3:89:50:29:9C:9E:81:0A:39:E9:FF:54:29:CB:E2:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHqzdOJUCmcnoEKOen_VCnL4lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:cc:7e:78:a9:4e:8e:2e:41:c5:f7:c9:ff:1e:39:32:e2:b9:
         14:36:c7:d0:f2:74:f6:f4:26:b4:7c:89:38:6f:a5:9c:ec:c7:
         67:48:b6:2c:cc:26:a6:7b:d8:e5:45:c4:de:f3:28:3e:72:bd:
         00:8a:62:95:61:e3:60:9e:bc:16:a2:fc:89:a9:3b:be:f2:a7:
         58:bf:e2:76:bd:8c:68:16:4d:59:c7:74:e5:d3:97:11:67:4f:
         6e:de:be:51:83:1c:0c:fe:23:e1:c3:c5:b4:74:45:59:f5:72:
         89:57:58:77:57:ba:df:52:69:69:ce:50:78:7d:20:0d:d4:6d:
         0a:ba:b8:88:db:3d:a1:67:c8:27:67:76:aa:55:2a:d6:69:43:
         83:ef:48:b9:47:db:5c:fa:fc:3b:66:cd:0d:c3:e0:05:4a:99:
         cb:de:12:47:32:7a:a0:d1:d5:15:b8:59:5a:a1:fa:17:79:ad:
         1d:0f:ad:e5:a8:fb:4f:cd:d8:fe:eb:ef:4f:f9:f9:e5:f2:61:
         c7:e6:35:b3:be:56:cd:2c:68:ea:d4:e2:de:7f:eb:0b:a2:bc:
         43:39:12:a8:64:da:1e:55:ae:e5:51:6e:3e:22:9e:3d:63:44:
         62:85:3c:c2:81:de:32:35:4d:9c:32:06:bb:8e:b0:23:7d:73:
         90:2e:18:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 08:19:35 2026 by rpki-client